Stock Manager For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-35091 Jul 11, 13:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in storeapps Stock Manager for WooCommerce woocommerce-stock-manager allows Cross Site Request Forgery.10.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Stock Manager For Woocommerce Storeapps

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2021-34619 Jul 21, 15:16 HIGH POC This Week

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress CSRF File Upload Wordpress Plugin +2

NVD

CVSS 3.1

8.8

EPSS

0.7%

CVE-2023-35091

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress CSRF Wordpress Plugin +2

NVD

CVE-2021-34619

EPSS 1% CVSS 8.8

HIGH POC This Week

PHP WordPress CSRF +4

NVD